$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fcd42c79-dd5e-3c82-b992-91be371e11b3.roa File: fcd42c79-dd5e-3c82-b992-91be371e11b3.roa (raw, json) Hash identifier: I34m1kMZ7DLQmZg2XWRndNeyfjj3ApKbBBIHg/xNmJc= Subject key identifier: F7:52:21:43:11:C1:7D:2A:11:84:91:3A:67:64:FF:A1:F7:0D:15:F8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D9B854F26AEFA1A3AE3F62A00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fcd42c79-dd5e-3c82-b992-91be371e11b3.roa Signing time: Fri 24 Apr 2026 01:00:23 +0000 ROA not before: Fri 24 Apr 2026 01:00:23 +0000 ROA not after: Thu 23 Jul 2026 01:00:23 +0000 asID: 30036 IP address blocks: 173.17.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:85:4f:26:ae:fa:1a:3a:e3:f6:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 01:00:23 2026 GMT Not After : Jul 23 01:00:23 2026 GMT Subject: CN=8a91872b-e942-46c8-8375-d25b7cc403e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ef:f2:cb:9c:65:6f:d2:31:cb:0c:55:66:ea: ff:a7:1d:98:10:b5:4e:d2:1b:a8:11:64:a1:4e:37: e7:6d:93:61:f9:bd:0f:2f:db:04:93:93:69:fc:3d: 6b:61:59:50:aa:03:83:e6:7f:5e:b9:d5:d2:38:cc: f0:57:8d:f1:d7:cb:ac:ea:8a:95:92:f6:79:d5:0c: 65:3b:b9:54:76:fa:9e:d5:65:a6:08:2c:ca:b7:80: 69:e1:95:82:31:cb:38:2c:06:3a:ea:0e:93:46:38: c3:3a:3a:c9:20:47:9f:8d:b0:7c:7b:13:08:48:22: ec:e0:59:df:48:dd:cb:17:80:70:24:77:20:bc:39: a2:6e:ab:1b:90:ad:e9:2f:63:2f:94:6b:45:2d:3f: 44:b6:49:6c:cb:25:e1:a9:90:a0:16:33:fa:0f:72: 39:5c:68:0f:30:c8:ed:59:83:29:10:45:47:9b:21: 1a:01:fd:c1:44:d2:9b:b0:2b:b1:1a:d8:55:0b:89: 26:4d:3e:33:6b:ef:44:4d:d8:ff:38:22:fa:29:da: c7:77:1c:da:20:29:99:32:7e:a9:42:8c:84:cb:d3: c0:65:2b:f6:02:ae:3c:25:a3:c4:17:59:f7:98:c8: e2:5e:91:b9:b1:77:99:1c:23:d1:92:89:e2:5a:2c: fb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:52:21:43:11:C1:7D:2A:11:84:91:3A:67:64:FF:A1:F7:0D:15:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fcd42c79-dd5e-3c82-b992-91be371e11b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:cf:a6:0d:13:63:8b:fd:1e:80:7b:4f:cd:af:ba:1d:26:de: 61:c7:ec:8e:88:68:dd:ca:19:8c:79:73:67:c2:c9:0e:90:6e: d4:67:f7:e6:83:da:0f:75:09:cf:8e:1f:b0:b2:63:5d:cc:68: 78:01:26:58:29:d9:63:2b:54:e3:86:1b:a1:15:2d:be:82:fa: db:34:d9:f7:07:8d:9c:01:75:07:20:93:9d:2e:c4:41:98:1a: 05:19:01:45:e2:e4:b9:f2:ad:19:01:b9:3d:16:9c:83:cd:f8: 08:65:1b:cf:44:57:f6:81:52:05:b2:a7:9f:ab:c0:45:db:a5: 73:65:b1:79:ff:c2:17:57:0c:1a:d2:69:62:a5:99:d8:5c:25: b0:01:b5:01:95:c1:77:16:ef:77:85:b0:1a:3d:18:8a:d0:ea: b2:0b:a3:9e:1e:5a:8f:bc:d2:93:d7:ff:31:57:4e:dc:b2:db: 1b:1a:e4:88:31:cc:5c:0c:8e:06:c3:e2:bf:77:de:0c:b1:99: 52:96:18:8a:56:8d:81:6d:f5:31:8c:ec:45:9a:39:f0:9f:de: 14:34:a2:17:f6:c0:24:d6:3e:b2:27:45:c0:a7:33:ea:76:63: be:ab:46:70:e4:c6:84:d0:35:e0:bf:34:fe:9f:01:fd:eb:a8: 63:8a:78:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2bhU8mrvoaOuP2KgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk OGE5MTg3MmItZTk0Mi00NmM4LTgzNzUtZDI1YjdjYzQwM2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO/yy5xlb9IxywxVZur/px2YELVO0huoEWSh TjfnbZNh+b0PL9sEk5Np/D1rYVlQqgOD5n9eudXSOMzwV43x18us6oqVkvZ51Qxl O7lUdvqe1WWmCCzKt4Bp4ZWCMcs4LAY66g6TRjjDOjrJIEefjbB8exMISCLs4Fnf SN3LF4BwJHcgvDmibqsbkK3pL2MvlGtFLT9EtklsyyXhqZCgFjP6D3I5XGgPMMjt WYMpEEVHmyEaAf3BRNKbsCuxGthVC4kmTT4za+9ETdj/OCL6KdrHdxzaICmZMn6p QoyEy9PAZSv2Aq48JaPEF1n3mMjiXpG5sXeZHCPRkoniWiz7/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdSIUMRwX0qEYSROmdk/6H3DRX4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmNkNDJjNzktZGQ1ZS0z YzgyLWI5OTItOTFiZTM3MWUxMWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbPpg0TY4v9HoB7T82vuh0m3mHH7I6IaN3KGYx5c2fCyQ6QbtRn9+aD 2g91Cc+OH7CyY13MaHgBJlgp2WMrVOOGG6EVLb6C+ts02fcHjZwBdQcgk50uxEGY GgUZAUXi5LnyrRkBuT0WnIPN+AhlG89EV/aBUgWyp5+rwEXbpXNlsXn/whdXDBrS aWKlmdhcJbABtQGVwXcW73eFsBo9GIrQ6rILo54eWo+80pPX/zFXTtyy2xsa5Igx zFwMjgbD4r933gyxmVKWGIpWjYFt9TGM7EWaOfCf3hQ0ohf2wCTWPrInRcCnM+p2 Y76rRnDkxoTQNeC/NP6fAf3rqGOKeE4= -----END CERTIFICATE-----Generated at Fri May 8 18:25:12 2026 by rpki-client